Cybersecurity Lead

21 Air LLC.; Miami (FL); Hybrid; USD 120,000 - 170,000; Full time

Job summary

21 Air LLC. is seeking an experienced Cybersecurity Lead to protect our multi-site infrastructure, drive key initiatives, and balance hands-on security with governance. This hybrid role reports to the IT Director and focuses on secure configurations, incident response, vendor risk, and continuous improvement of security controls across cloud and on‑prem environments.

You'll work with leadership to align security with business needs and stay ahead of evolving threats.

Qualifications

• 5+ years hands-on experience in Cybersecurity roles.
• Strong knowledge of firewalls, VPNs, and Microsoft 365 security controls.
• Solid experience with Windows Server, Azure, and AWS environments.
• Proven experience in managing security incidents and implementing technical controls.
• Familiarity with industry‑standard cybersecurity frameworks (e.g., NIST, CIS Controls, ISO 27001) and applicable aviation security guidance (TSA/FAA directives).
• Excellent analytical, problem‑solving, and decision‑making skills.
• Strong written and verbal communication skills to interact effectively with department leaders.

Responsibilities

• Monitor and secure network, server, and cloud infrastructure (Microsoft 365, Azure, AWS).
• Lead enterprise cybersecurity initiatives, strategy deployment, and security projects (endpoint protection, MFA, vulnerability mitigation, secure configurations).
• Lead cybersecurity response, triage, root cause analysis, and post‑incident coordination during major incidents.
• Coordinate third‑party penetration testing, vulnerability tracking, and vendor risk assessments.
• Serve as a primary security advisor to business leaders, help prioritize security initiatives based on business risk, and support cyber insurance questionnaires.
• Conduct internal audits and implement security controls across cloud and on‑prem environments.
• Maintain and optimize endpoint security tools EDR/MDR.
• Support phishing detection, remediation, and user awareness initiatives.
• Maintain, optimize, and enforce cybersecurity documentation, procedures, and policies.
• Collaborate with IT Director on future roadmap items, including SIEM implementation and security compliance frameworks.
• Stay current on emerging threats and recommend proactive measures.

Skills

Cybersecurity leadership

Firewalls & VPNs

Microsoft 365 security

Cloud security (Azure/AWS)

Incident response

Access control & encryption

Patching & hardening

Security frameworks (NIST/ISO/CIS)

Written & verbal communication

Tools

EDR/MDR

SIEM

Cloud security tools

Job description

Job Summary

Experienced Cybersecurity Lead to protect our multi‑site infrastructure and drive key cybersecurity initiatives. This is a hands‑on, hybrid role that balances technical execution with security governance and compliance. Reports directly to the IT Director to ensure our systems remain secure, resilient, and compliant.

Key Responsibilities

• Monitor and secure network, server, and cloud infrastructure (Microsoft 365, Azure, AWS)
• Lead enterprise cybersecurity initiatives, strategy deployment, and security‑related projects (endpoint protection, MFA, vulnerability mitigation, secure configurations)
• Lead cybersecurity response, triage, root cause analysis, and post‑incident coordination during major incidents
• Coordinate third‑party penetration testing, vulnerability tracking, and vendor risk assessments
• Serve as a primary security advisor to business leaders, help prioritize security initiatives based on business risk, and support cyber insurance questionnaires
• Conduct internal audits and implement security controls across cloud and on‑prem environments
• Maintain and optimize endpoint security tools EDR/MDR
• Support phishing detection, remediation, and user awareness initiatives
• Maintain, optimize, and enforce cybersecurity documentation, procedures, and policies
• Collaborate with IT Director on future roadmap items, including SIEM implementation and security compliance frameworks
• Stay current on emerging threats and recommend proactive measures

Requirements

• 5+ years of hands‑on experience in Cybersecurity roles
• Strong knowledge of firewalls, VPNs, and Microsoft 365 security controls
• Solid experience with Windows Server, Azure, and AWS environments
• Proven experience in managing security incidents and implementing technical controls
• Solid understanding of access control, encryption, patch management, and system hardening
• Familiarity with industry‑standard cybersecurity frameworks (e.g., NIST, CIS Controls, ISO 27001) and applicable aviation security guidance (TSA/FAA directives)
• Excellent analytical, problem‑solving, and decision‑making skills
• Strong written and verbal communication skills to interact effectively with department leaders

Preferred Qualifications

• Certifications such as Security+, MS‑500, Cisco Security, CISSP, or similar are a plus
• Experience working in multi‑site environment
• Familiarity with EDR platforms, phishing response, and cloud identity protection